Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-30 15:24 UTC
  • Importiert: 2026-10-07 16:04 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: c8f689a93d1044ec1d7f7afd71ad3eb157e7769af8e189340a5c4f00b0a95a92

Inhalt

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30.

The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround. It carries a

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-76504

CRITICAL

9.8

CRITICAL

9.8

2026-09-30

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews